Yes and the only way you can “require” anything when doing business is through a written contract with clauses that specify what happens when the contract is breached and the jurisdiction where the breaches will be adjudicated.
IANAL, but my understanding is that this isn't true, and the whole subfield of tort law [1] is about the rights and obligations that firms have even in the absence of a contract. If you steal trade secrets from a competitor, even if you have no contract or business relationship with them, they can still sue you for a very large amount of money and possibly get an injunction against using that stolen information. Similarly for cases of patent/copyright infringement, libel, slander, price-fixing, antitrust, etc.
I suspect that a large class of these "business ethics" violations are actually torts, but the problem with enforcing them is that to do so you a.) need to know what your rights are b.) need to detect violations of them and c.) need to bring a lawsuit against the offender. I remember that on Google's invention disclosure form, one of the questions was "How easy would it be to detect if a competitor was using this invention in their product?", and if the answer was "We'd never know", we wouldn't patent the idea and would keep it as a trade secret instead, on the assumption that if a competitor could use the invention illegally without us knowing about it, they would, and so it was better to deny them knowledge of the invention entirely than to publish and try to enforce unenforceable rights.
When the aggrieved party is a consumer or worker, it's triply difficult, as most consumers a.) aren't aware of their rights b.) have no information about what's going on inside big corporations and c.) don't have money to sue even if they know. Many of the ethical problems in U.S. business today stem from the legal system not being able to scale up to 300M often poorly-informed citizens.
And how well will a handshake - he said/she said agreement hold up in court? How easy is it for one party to “misremember” what was said? There is a reason almost every contract has an “entire agreements clause”
Torts aren't handshake agreements. They're duties that the state decides that all organizations owe to citizens or other organizations, by virtue of existing, but which should be enforced by the party who is actually wronged. (This is what distinguishes them from "crimes", which are forbidden actions that the state actively pursues.)
In this case, Acton's not the aggrieved party. The consumer is - they could argue that Facebook's introduction of advertising and linking of user data harmed them in a way they had not agreed to when they signed up for Whatsapp, or that its purchase violated antitrust law and reduced consumer choice. But good luck enforcing that, at least in the US, where privacy protections are weak and antitrust regulators are asleep. It looks like the EU regulators actually did enforce it, and slapped FB with a $122M fine, but that's peanuts for them.
So while in theory you are correct, in practice, usually whatever punishment is given in a company doesn’t usually amount to enough to change the company and individuals are usually shielded from the consequences of any malfeasance....
> Yes and the only way you can “require” anything when doing business is through a written contract with clauses that specify what happens when the contract is breached and the jurisdiction where the breaches will be adjudicated.
I expect/require that people not steal from me even though I don't have a contract or prior agreement with them, and I also predict that some people won't respect my property.
> You mean, except for criminal law? I don't see how this is in any way equivalent to adding ads to Whatsapp.
It's not against the law to lie to me in most cases, but I still have the same expectation/requirement that people will be honest with me that I do that they won't steal.